Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/7f3ee2c7-570f-3aee-b3bb-e764f56c0872.roa
File: 7f3ee2c7-570f-3aee-b3bb-e764f56c0872.roa (raw, json)
Hash identifier: RyV9j1tyIligl1YdX7Y5nw81K+65k5DZIYSkR1i1Td0=
Subject key identifier: AA:29:55:D9:E5:86:4A:1D:12:38:92:AB:3C:89:3C:0F:64:2A:27:33
Certificate issuer: /CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb
Certificate serial: 010D0C9F43285837EF89E7E5D158FD965DA50580
Authority key identifier: D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/7f3ee2c7-570f-3aee-b3bb-e764f56c0872.roa
Signing time: Tue 03 Nov 2020 05:00:00 +0000
ROA not before: Tue 03 Nov 2020 05:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 46873
IP address blocks: 23.158.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:ef:89:e7:e5:d1:58:fd:96:5d:a5:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb
Validity
Not Before: Nov 3 05:00:00 2020 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=a1822f31-f419-473f-bef3-609e3d0bf395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:9a:2c:64:d3:d7:a8:96:58:a8:8d:3a:1f:
8a:8c:ad:79:b8:ca:a5:6e:ea:71:ae:70:b8:99:b1:
b3:2d:0c:8b:1c:ef:d0:d9:6d:8e:11:e6:6e:94:4d:
bb:75:0e:49:b6:bd:be:df:e0:99:d2:3d:e0:17:19:
1e:9c:a0:bc:ba:78:88:e2:fe:d7:84:19:f6:4b:86:
5d:c4:b0:8e:f8:f0:ce:be:ee:00:89:fa:cc:15:ed:
d7:40:4d:1c:29:77:56:a3:7b:e8:59:1e:b1:6b:fa:
99:af:39:7c:e9:39:62:b7:4b:06:c8:1a:87:ec:74:
0d:3c:98:ee:5f:33:e1:0e:65:45:7e:9a:8b:6c:8f:
35:40:63:37:1d:37:b7:8a:a9:6c:b3:3f:47:5e:9d:
e8:99:04:e1:eb:45:78:e1:a9:23:2c:39:99:48:f2:
77:76:9c:9f:60:b1:5f:3d:9f:97:14:69:c1:77:94:
37:9a:f0:71:9a:3d:92:23:2c:1e:41:a9:ed:93:04:
ad:88:9c:85:94:82:5b:87:18:42:2d:99:c0:0d:85:
ad:6c:64:93:e8:ac:c2:b3:ec:af:2e:03:b8:4a:06:
5a:94:7e:51:89:28:bd:cf:f4:3d:ec:75:18:30:22:
fc:09:11:0d:01:26:24:c1:07:f7:64:cc:88:31:a2:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:55:D9:E5:86:4A:1D:12:38:92:AB:3C:89:3C:0F:64:2A:27:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/7f3ee2c7-570f-3aee-b3bb-e764f56c0872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.crl
X509v3 Authority Key Identifier:
keyid:D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:9b:6a:02:4b:2a:d8:a6:f3:bb:d3:e1:f1:fc:cf:ac:2d:40:
a6:ee:b4:23:ec:64:5e:4a:a4:ad:e1:9d:d1:65:53:1a:fd:da:
da:48:24:08:f6:3b:53:12:00:4d:d1:e0:d2:4d:7a:d8:9f:9b:
ee:c2:ae:26:08:0b:70:b4:71:80:d0:4a:b1:41:b1:47:6c:ef:
23:19:48:00:84:d0:c5:ab:79:ae:9b:bc:26:4f:3d:77:1f:68:
8a:13:38:5b:d6:8f:17:0a:6d:c6:45:ff:e4:b3:c6:21:01:1d:
13:66:31:f6:71:bd:ab:87:15:c1:04:a3:5e:c9:1f:5c:7d:74:
3e:78:81:be:40:cf:45:5d:03:be:69:43:e3:9e:4b:3c:80:ce:
4f:04:cb:00:fc:a9:06:d2:63:60:9a:56:d4:f5:37:a7:00:e1:
b4:2f:8e:84:a5:35:43:30:d6:d1:df:d1:63:ef:2a:ad:bc:a5:
64:85:59:0e:5b:f4:41:48:a0:97:68:5f:ea:4c:96:7a:a1:ef:
41:8e:bb:3f:86:e1:db:e0:a4:d6:9a:85:9a:9b:00:bc:f5:2a:
c5:5c:bc:a2:d7:3b:e1:7a:04:d9:64:fc:a3:9f:3e:d6:3b:9a:
96:ec:5e:f7:d1:89:0c:2c:c6:5c:d0:12:df:f9:23:3e:d2:ca:
29:91:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:17 2025 by rpki-client